Trojan.Ascetic.C AKA W32.Sober.P@mm worm

May 15, 2005

Another variant of the Sober virus (W32.Sober.P@mm) has been sighted at Virginia Tech. W32.Sober.P@mm is a mass-mailing worm that uses its own SMTP engine to spread by sending itself as an email attachment to addresses gathered from the infected computer. The subject of the email varies and will be in either English or German. The email sender address is spoofed. The name of the email attachment varies.

Removal

Symantec has released further information and removal instructions for this worm:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.ascetic.c.html